CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:02.
Filters
1 actief1 advisories gevonden
Advisory2025-11_VDE-2025-101
CODESYS Development System - Deserialization of Untrusted Data
Gepubliceerd
1 december 2025
Laatste update
1 december 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
A vulnerability has been discovered in the print engine of the CODESYS development system. If a CODESYS project file or archive file was crafted in a specific way, the CODESYS development system could execute arbitrary code when a user opens these files and configures the print/printer options or prints the project or parts of it. This arbitrary code would be executed in the context of the user who was tricked into opening the project.
Mitigatiesamenvatting
Open/install CODESYS archives, projects and packages from trustworthy sources only.
Revisiegeschiedenis (1)
Initiële publicatie — 1 december 2025
Initial revision.